Thanks, that would be awesome! Just to be precise here, I am aware that your plugin does not handle the access to these folders – however, your plugin somehow directly accesses (via HTTP) the file admin-ajax.php which is located in wp-admin. Once this directory is protected by Apache’s .htaccess file, any HTTP request to this file fails – and that is the problem, there should not be any HTTP requests to files in wp-admin unless the user is logged in to the dashboard, that’s basically how WP is meant to be used.
Thanks & best regards,
Christoph
